----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
Symantec Mail Security for SMTP Response Handling Denial of Service

SECUNIA ADVISORY ID:
SA33202

VERIFY ADVISORY:
http://secunia.com/advisories/33202/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Symantec Mail Security for SMTP 5.x
http://secunia.com/advisories/product/13591/

DESCRIPTION:
A vulnerability has been discovered in Symantec Mail Security for
SMTP, which can be exploited by malicious people to cause a DoS
(Denial of Service).

The vulnerability is caused due an error when processing failed mail
deliveries. This can be exploited by causing a mail to be delivered
to a malicious mail server, which returns a specially crafted
response.

Successful exploitation repeatedly crashes the Filter Hub service and
prevents further processing of mails.

The vulnerability is confirmed in version 5.0.1 with Patch 189
installed. Other versions may also be affected.

SOLUTION:
Apply Patch 200 for version 5.0.1:
ftp://ftp.symantec.com/public/english_us_canada/products/symantec_mail_security/5.0.1_smtp/updates/patch200.zip

PROVIDED AND/OR DISCOVERED BY:
Silently fixed by the vendor.

Additional information provided by Secunia Research.

ORIGINAL ADVISORY:
Symantec:
ftp://ftp.symantec.com/public/english_us_canada/products/symantec_mail_security/5.0.1_smtp/updates/RELEASE_NOTES.p200.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------